Privacy Policy

GEO Copilot Chrome Extension

Last updated: March 17, 2026

The short version:

All webpage analysis happens locally in your browser. No page content, scan results, or browsing data is sent to any server. The only external call is license key validation for paid users.

What Data We Process Locally

GEO Copilot processes the following data entirely on your device:

  • Structural metadata: headings, Schema.org markup, JSON-LD, meta tags, Open Graph tags, and internal/external links on the scanned page
  • Content signals: word count, heading hierarchy, publication dates, author information, and content organization patterns
  • Technical indicators: canonical URLs, mobile viewport tags, page speed hints, and structured data validity
  • Scan results: your AI Citability Score, dimension breakdowns, and generated recommendations
  • Tracked keywords: keywords you add for monitoring across scans
  • User preferences: settings like scan defaults and display preferences

GEO Copilot does not read form data, passwords, cookies, or any input fields. The content script only activates when you explicitly initiate a scan.

How Data Is Stored

All data is stored locally using two mechanisms:

  • IndexedDB: scan results, keyword tracking history, and settings
  • chrome.storage.local: extension preferences and a hashed license key (for paid users)

No data is synced across devices. Each browser installation maintains its own independent data store.

Data Sent Externally

GEO Copilot communicates with external services in one specific case:

License Validation (paid users only)

If you activate a paid license, the extension communicates with Lemon Squeezy's API to:

  • Validate your license key on activation
  • Periodically re-validate to confirm the license is still active
  • Deactivate the license when you choose to do so

The only data sent is a hashed version of your license key and a device instance identifier. No scan results, page content, URLs, or browsing data is included in these requests.

What Is Never Sent

To be explicit, the following data is never transmitted externally:

  • Page content, URLs, or titles of scanned pages
  • Scan results or AI Citability Scores
  • Keywords you are tracking
  • Browsing history or tab information
  • Any form data, passwords, or personal information

No Analytics, No Telemetry

GEO Copilot does not include any analytics SDK, telemetry system, or usage tracking. There are no cookies, no fingerprinting, no anonymous usage counts. The extension makes zero network requests during normal operation (scans are entirely local).

Your Rights

You have full control over your data at all times:

  • View: All scan history and stored data is accessible within the extension
  • Delete: Clear all stored data from the extension settings at any time
  • Export: Download scan results as PDF reports (Pro and above)
  • Uninstall: Removing the extension deletes all associated data automatically, including IndexedDB entries and chrome.storage.local data

Permissions

The extension requests the following Chrome permissions:

  • activeTab: to read the current page's structural metadata when you initiate a scan
  • storage: to persist your settings and license information locally
  • Host permission for Lemon Squeezy API: api.lemonsqueezy.com (license validation only)

GEO Copilot does not request broad host permissions. It only accesses the active tab when you click the extension icon to start a scan.

Children's Privacy

GEO Copilot is not directed at children under 13 and does not knowingly process data from children.

Changes to This Policy

We may update this policy as features evolve. The "Last updated" date at the top will reflect any changes.

Contact

Questions about this privacy policy? Email us at [email protected].